

Appendix II 





w/ cookie management, pay attention to flag "ikena: shared" 



(16:39:35) Browser_Handler(3 9 1 b3 3 8): :handle_input[429 1 03 8473], r_bytes-644 
(16:39:35) Browser_Handler(391b338): Dumping raw incoming data... 
(16:39:35) Dumping 0x3ClF960 size 644 
(16:39:35) 47 45 54 20 68 74 74 70 3A 2F 2F 6D 79 2E 79 61 
(16:39:35) 68 6F 6F 2E 63 6F 6D 2F 20 48 54 54 50 2F 3 1 2E 
(16:39:35) 30 0D OA 41 63 63 65 70 74 3A 20 69 6D 61 67 65 
(16:39:35) 2F 67 69 66 2C 20 69 6D 61 67 65 2F 78 2D 78 62 
(16:39:35) 69 74 6D 61 70 2C 20 69 6D 61 67 65 2F 6A 70 65 
(16:39:35) 67 2C 20 69 6D 61 67 65 2F 70 6A 70 65 67 2C 20 
(16:39:35) 61 70 70 6C 69 63 61 74 69 6F 6E 2F 76 6E 64 2E 
(16:39:35) 6D 73 2D 70 6F 77 65 72 70 6F 69 6E 74 2C 20 61 
(16:39:35) 70 70 6C 69 63 61 74 69 6F 6E 2F 76 6E 64 2E 6D 
(16:39:35) 73 2D 65 78 63 65 6C 2C 20 61 70 70 6C 69 63 61 
(16:39:35) 74 69 6F 6E 2F 6D 73 77 6F 72 64 2C 20 2A 2F 2A 
(16:39:35) 0D OA 41 63 63 65 70 74 2D 4C 61 6E 67 75 61 67 
(16:39:35) 65 3A 20 65 6E 2D 75 73 OD OA 69 6B 65 6E 61 3A 
(16:39:35) 20 73 68 61 72 65 64 OD OA 50 72 6F 78 79 2D 43 
(16:39:35) 6F 6E 6E 65 63 74 69 6F 6E 3A 20 4B 65 65 70 2D 
(16:39:35) 41 6C 69 76 65 OD OA 55 73 65 72 2D 41 67 65 6E 
X (16:39:35) 74 3A 20 4D 6F 7A 69 6C 6C 61 2F 34 2E 30 20 28 
I (16:39:35) 63 6F 6D 70 61 74 69 62 6C 65 3B 20 4D 53 49 45 
\ (16:39:35) 20 35 2E 35 3B 20 57 69 6E 64 6F 77 73 20 39 38 
| (16:39:35) 29 OD OA 48 6F 73 74 3A 20 6D 79 2E 79 61 68 6F 
I (16:39:35) 6F 2E 63 6F 6D OD OA 43 6F 6F 6B 69 65 3A 20 42 
4 (16:39:35) 3D 33 75 6A 38 76 3 1 70 6B 6E 34 6F 75 72 3B 20 
" : (16:39:35)49 3D69 31 3D 31 75 31 76 32 32 32 36 32 39 32 
j(16:39:35) 70 34 37 34 39 34 67 34 75 35 35 37 31 37 61 37 
' (16:39:35) 64 61 30 61 63 61 64 62 30 62 33 62 64 62 70 63 
«.(16:39:35) 30 63 31 63 67 63 6F 63 70 69 62 26 69 72 3D 37 
^(16:39:35) 38 3B 20 59 3D 76 3D 3 1 26 6E 3D 39 38 74 70 6E 
^(16:39:35) 74 30 37 75 30 6C 6F 30 26 6C 3D 32 37 34 64 36 
^(16:39:35) 5F 70 37 30 64 36 2F 6F 26 70 3D 6D 32 64 30 31 
^(16:39:35) 6F 39 34 31 30 30 62 30 34 26 72 3D 32 34 26 6C 
3(16:39:35) 67 3D 75 73 26 69 6E 74 6C 3D 75 73 3B 20 54 3D 
^(16:39:35) 7A 3D 54 68 77 66 36 41 54 6E 46 67 36 41 69 4E 
(16:39:35) 75 5A 68 32 2F 65 6F 63 45 4E 6A 63 33 42 6A 59 
(16:39:35) 7A 4E 7A 5A 50 4D 54 63 7A 4D 67 2D 2D 26 61 3D 
(16:39:35) 67 45 45 26 73 6B 3D 44 41 41 35 4F 36 30 4D 47 
(16:39:35) 4F 53 6F 46 78 26 64 3D 63 32 77 42 54 56 52 42 
(16:39:35) 64 30 46 55 52 54 42 4E 52 45 55 30 54 6D 70 42 
(16:39:35) 4D 45 35 52 4C 53 30 42 59 51 46 6E 52 55 55 42 
(16:39:35) 61 57 63 42 61 55 46 56 65 6B 46 42 41 58 70 36 
(16:39:35)41 56 52 6F 64 32 59 32 51 57 64 58 51 51 2D 2D 
(16:39:35) OD OA OD OA 
(16:39:35) Dumped 0x3ClFBE4 done 644 



GET http://my.ya 
hoo.com/ HTTP/1. 
0.. Accept: image 
/gif, image/x-xb 
itmap, image/jpe 
g, image/pjpeg, 
application/vnd. 
ms-powerpoint, a 
pplication/vnd.m 
s-excel, applica 
tion/msword, */* 
. . Accept-Languag 
e: en-us. .ikena: 
shared.. Proxy-C 
onnection: Keep- 
Alive. .User- Agen 
t: Mozilla/4.0 ( 
compatible; MSIE 
5.5; Windows 98 
)..Host: my.yaho 
o. com. .Cookie: B 
=3uj8vlpkn4our; 
I=il=lulv2226292 
P 47494g4u55717a7 
da0acadb0b3bdbpc 
Oc 1 cgcocpib&ir=7 
8; Y=v=l&n=98tpn 
t07u01o0&l=274d6 
_p70d6/o&p=m2d0 1 
o94100b04&r=24&l 
g=us&intl=us; T= 
z=Thwf6ATnFg6AiN 
uZh2/eocENjc3BjY 
zNzZPMTczMg--&a= 
gEE&sk=DAA5O60MG 
OsoFx&d=c2wBTVRB 
dOFURTBNREUOTmpB 
ME5RLS0BYQFnRUUB 
aWcBaUFVekFBAXp6 
AVRod2Y2QWdXQQ~ 



(16:39:35) Browser_Handler(391b338): Dumping parsed data... 
(16:39:35) Dumping 0x392BC54 size 289 
(16:39:35) 47 45 54 20 2F 20 48 54 54 50 2F 3 1 2E 30 OD OA 
(16:39:35) 41 63 63 65 70 74 3A 20 69 6D 61 67 65 2F 67 69 
(16:39:35) 66 2C 20 69 6D 61 67 65 2F 78 2D 78 62 69 74 6D 
(16:39:35) 61 70 2C 20 69 6D 61 67 65 2F 6A 70 65 67 2C 20 
(16:39:35) 69 6D 61 67 65 2F 70 6A 70 65 67 2C 20 61 70 70 



GET /HTTP/1.0.. 
Accept: image/gi 
f, image/x-xbitm 
ap, image/jpeg, 
image/pjpeg, app 



II-l 



(16:39:35) 6C 69 63 61 74 69 6F 6E 2F 76 6E 64 2E 6D 73 2D lication/vnd.ms- 

(16:39:35) 70 6F 77 65 72 70 6F 69 6E 74 2C 20 61 70 70 6C powerpoint, appl 

(16:39:35) 69 63 61 74 69 6F 6E 2F 76 6E 64 2E 6D 732D 65 ication/vnd.ms-e 

(16:39:35) 78 63 65 6C 2C 20 61 70 70 6C 69 63 61 74 ; 69 6F xcel, applicatio 

(16:39:35) 6E 2F 6D 73 77 6F 72 64 2C 20 2A 2F 2A 7 0D OA 41 n/msword, */*..A 

(16:39:35) 63 63 65 70 74 2D 4C 61 6E 67 75 61 67 65 3A 20 ccept-Language: 

(16:39:35) 65 6E 2D 75 73 0D OA 43 6F 6E 6E 65 63 74 69 6F en-us..Connectio 

(16:39:35) 6E 3A 20 4B 65 65 70 2D 41 6C 69 76 65 0D OA 55 n: Keep-Alive..U 

(16:39:35) 73 65 72 2D 41 67 65 6E 74 3A 20 4D 6F 7A 69 6C ser-Agent: Mozil 

(16:39:35) 6C 61 2F 34 2E 30 20 28 63 6F 6D 70 61 74 69 62 la/4.0 (compatib 

(16:39:35) 6C 65 3B 20 4D 53 49 45 20 35 2E 35 3B 20 57 69 le; MSIE 5.5; Wi 

(16:39:35) 6E 64 6F 77 73 20 39 38 29 OD OA 48 6F 73 74 3A ndows 98)..Host: 

(16:39:35) 20 6D 79 2E 79 61 68 6F 6F 2E 63 6F 6D OD OA OD my.yahoo.com... 
(16:39:35) OA 

(16:39:35) Dumped 0x392BD75 done 289 

(16:39:39) Web_Handler(391b3a4)::send_i: Dumping outgoing data=[3921f44], size=289... 
(16:39:39) Dumping 0x3921F44 size 289 

(16:39:39)47 45 54 20 2F 20 48 54 54 50 2F 31 2E 30 OD OA GET / HTTP/ 1.0.. 

(16:39:39) 41 63 63 65 70 74 3A 20 69 6D 61 67 65 2F 67 69 Accept: image/gi 

(16:39:39) 66 2C 20 69 6D 61 67 65 2F 78 2D 78 62 69 74 6D f, image/x-xbitm 

(16:39:39) 61 70 2C 20 69 6D 61 67 65 2F 6A 70 65 67 2C 20 ap, image/jpeg, 

S (16:39:39) 69 6D 61 67 65 2F 70 6A 70 65 67 2C 20 61 70 70 image/pjpeg, app 

1 (16:39:39) 6C 69 63 61 74 69 6F 6E 2F 76 6E 64 2E 6D 73 2D lication/vnd.ms- 
J (16:39:39) 70 6F 77 65 72 70 6F 69 6E 74 2C 20 61 70 70 6C powerpoint, appl 
jj (16:39:39) 69 63 61 74 69 6F 6E 2F 76 6E 64 2E 6D 73 2D 65 ication/vnd.ms-e 
jj (16:39:39) 78 63 65 6C 2C 20 61 70 70 6C 69 63 61 74 69 6F xcel, applicatio 

^ (16:39:39) 6E 2F 6D 73 77 6F 72 64 2C 20 2A 2F 2A OD OA 41 n/msword, */*..A 

% (16:39:39) 63 63 65 70 74 2D 4C 61 6E 67 75 61 67 65 3A 20 ccept-Language: 

2 (16:39:39) 65 6E 2D 75 73 OD OA 43 6F 6E 6E 65 63 74 69 6F en-us..Connectio 
"(16:39:39) 6E 3A 20 4B 65 65 70 2D 41 6C 69 76 65 OD OA 55 n: Keep-Alive..U 
=,(16:39:39) 73 65 72 2D 41 67 65 6E 74 3A 20 4D 6F 7A 69 6C ser-Agent: Mozil 
i (16:39:39) 6C 61 2F 34 2E 30 20 28 63 6F 6D 70 61 74 69 62 la/4.0 (compatib 
y (16:39:39) 6C 65 3B 20 4D 53 49 45 20 35 2E 35 3B 20 57 69 le; MSIE 5.5; Wi 
3(16:39:39) 6E 64 6F 77 73 20 39 38 29 OD OA 48 6F 73 74 3A ndows 98)..Host: 
^(16:39:39) 20 6D 79 2E 79 61 68 6F 6F 2E 63 6F 6D OD OA OD my.yahoo.com... 
3(16:39:39) OA 

^(16:39:39) Dumped 0x3922065 done 289 
(16:39:39) Web_Handler(391b3a4)::handle_input[4291038473], r__bytes = 1024, errno = 6 
(16:39:39) Web_Handler(391b3a4): Dumping raw incoming data=[3clf960], size=1024... 
(16:39:39) Dumping 0x3ClF960 size 1024 

(16:39:39) 48 54 54 50 2F 31 2E 30 20 32 30 30 20 4F 4B OD HTTP/1.0 200 OK. 

(16:39:39) OA 44 61 74 65 3A 20 4D 6F 6E 2C 20 30 35 20 46 .Date: Mon, 05 F 

(16:39:39) 65 62 20 32 30 30 31 20 32 31 3A 33 38 3A 34 34 eb 2001 21:38:44 

(16:39:39) 20 47 4D 54 OD OA 43 61 63 68 65 2D 43 6F 6E 74 GMT..Cache-Cont 
(16:39:39) 72 6F 6C 3 A 20 70 72 69 76 61 74 65 OD OA 43 6F rol: privatc.Co 

(16:39:39) 6E 6E 65 63 74 69 6F 6E 3A 20 63 6C 6F 73 65 OD nnection: close. 

(16:39:39) OA 43 6F 6E 74 65 6E 74 2D 54 79 70 65 3A 20 74 .Content-Type: t 

(16:39:39) 65 78 74 2F 68 74 6D 6C OD OA 53 65 74 2D 43 6F ext/html.. Set-Co 

(16:39:39) 6F 6B 69 65 3A 20 42 3D 62 35 6B 37 6F 71 38 74 okie: B-b5k7oq8t 

(16:39:39) 37 75 37 62 34 26 62 3D 32 3B 20 65 78 70 69 72 7u7b4&b=2; expir 

(16:39:39)65 73 3D 54 68 75 2C 20 31 35 20 41 70 72 20 32 es=Thu, 15 Apr 2 

(16:39:39) 30 31 30 20 32 30 3A 30 30 3A 30 30 20 47 4D 54 010 20:00:00 GMT 

(16:39:39) 3B 20 70 61 74 68 3D 2F 3B 20 64 6F 6D 61 69 6E ; path=/; domain 

(16:39:39) 3D 2E 79 61 68 6F 6F 2E 63 6F 6D OD OA OD OA 3C =.yahoo.com....< 
(16:39:39) 68 74 6D 6C 3E OA 3C 68 65 61 64 3E OA 3C 73 74 html>.<head>.<st 



II-2 



16:39:39) 79 6C 65 3E OA 3C 21 2D 2D OA 73 75 62 68 65 61 yle>.<!--.subhea 

16:39:39) 64 20 7B 20 63 6F 6C 6F 72 3A 3B 20 20 66 6F 6E d { color:; fon 

16:39:39) 74 2D 66 61 63 65 3 A 41 72 69 61 6C 3B 20 66 6F t-face:Arial; fo 

16:39:39) 6E 74 2D 73 69 7A 65 3A 2D 31 3B 20 7D 2D 2D 3E nt-size:-l; }--> 

16:39:39) OA 3C 2F 73 74 79 6C 65 3E OA OA 3C 74 69 74 6C .</style>..<titl 

16:39:39) 65 3E 57 65 6C 63 6F 6D 65 20 74 6F 20 4D 79 20 OWelcome to My 

16:39:39) 59 61 68 6F 6F 21 3C 2F 74 69 74 6C 65 3E OA 3C Yahoo! </title>.< 

16:39:39) 2F 68 65 61 64 3E OA 3C 62 6F 64 79 20 20 62 67 /head>.<body bg 

16:39:39) 63 6F 6C 6F 72 3D 22 23 66 66 66 66 66 66 22 20 color="#ffTfrT 

16:39:39) 6F 6E 4C 6F 61 64 3D 22 69 66 28 64 6F 63 75 6D onLoad="if(docum 

16:39:39) 65 6E 74 2E 66 6D 20 26 26 20 64 6F 63 75 6D 65 ent.frn && docume 

16:39:39) 6E 74 2E 66 6D 2E 6C 6F 67 69 6E 29 7B 64 6F 63 ntfm.login){doc 

16:39:39) 75 6D 65 6E 74 2E 66 6D 2E 6C 6F 67 69 6E 2E 66 ument.fm.login.f 

16:39:39) 6F 63 75 73 28 29 3B 7D 22 3E OA OA 3C 73 63 72 ocus();}">..<scr 

16:39:39) 69 70 74 20 6C 61 6E 67 75 61 67 65 3D 6A 61 76 ipt language=jav 

16:39:39) 61 73 63 72 69 70 74 3E OA 3C 21 2D 2D OA 76 61 ascript>.<!--.va 

16:39:39) 72 20 72 65 6D 6F 74 65 20 3D 20 6E 75 6C 6C 3B r remote - null; 

16:39:39) OA 66 75 6E 63 74 69 6F 6E 20 72 73 28 6E 2C 75 .function rs(n,u 

16:39:39) 2C 77 2C 68 29 20 7B OA 72 65 6D 6F 74 65 20 3D ,w,h) {.remote = 

16:39:39) 20 77 69 6E 64 6F 77 2E 6F 70 65 6E 28 75 2C 20 window.open(u, 

16:39:39) 6E 2C 20 27 77 69 64 74 68 3D 27 20 2B 20 77 20 n, 'width=' + w 

16:39:39) 2B 20 27 2C 68 65 69 67 68 74 3D 27 20 2B 20 68 + Mieight=' + h 

16:39:39) 20 2B 27 2C 72 65 73 69 7A 61 62 6C 65 3D 79 65 +\resizable=ye 

16:39:39) 73 2C 73 63 72 6F 6C 6C 62 61 72 73 3D 79 65 73 s,scrollbars=yes 

16:39:39) 27 29 3B OA 69 66 20 28 72 65 6D 6F 74 65 20 21 ');.if (remote ! 

16:39:39) 3D 20 6E 75 6C 6C 29 20 7B OA 69 66 20 28 72 65 = null) {.if (re 

16:39:39) 6D 6F 74 65 2E 6F 70 65 6E 65 72 20 3D 3D 20 6E mote.opener = n 

16:39:39) 75 6C 6C 29 OA 72 65 6D 6F 74 65 2E 6F 70 65 6E ull).remote.open 

16:39:39) 65 72 20 3D 20 73 65 6C 66 3B OA 77 69 6E 64 6F er - self;.windo 

16:39:39) 77 2E 6E 61 6D 65 20 3D 20 27 6D 79 59 61 68 6F w.name = 'myYaho 

16:39:39) 6F 52 6F 6F 74 27 3B OA 72 65 6D 6F 74 65 2E 6C oRoof;. remote. 1 

16:39:39) 6F 63 61 74 69 6F 6E 2E 68 72 65 66 20 3D 20 75 ocation.href = u 

16:39:39) 3B OA 7D OA 7D OA 2F 2F 2D 2D 3E OA 3C 2F 73 63 ;.}.}.//-->. </sc 

16:39:39) 72 69 70 74 3E OA 3C 63 65 6E 74 65 72 3E OA 3C ript>.<center>.< 

16:39:39) 74 61 62 6C 65 20 62 6F 72 64 65 72 3D 30 20 77 table border=0 w 

16:39:39) 69 64 74 68 3D 22 31 30 30 25 22 20 63 65 6C 6C idth="100%" cell 

16:39:39) 73 70 61 63 69 6E 67 3D 30 20 63 65 6C 6C 70 61 spacing=0 cellpa 

16:39:39) 64 64 69 6E 67 3D 30 3E 3C 74 72 3E 3C 74 64 20 dding=0><tr><td 

16:39:39) 77 69 64 74 68 3D 22 31 30 30 25 22 3E OA 3C 74 width= M 100%">.<t 

16:39:39) 61 62 6C 65 20 62 6F 72 64 65 72 3D 30 20 77 69 able border=0 wi 

16:39:39) 64 74 68 3D 31 30 30 25 20 63 65 6C 6C 73 70 61 dth=100% cellspa 

16:39:39) 63 69 6E 67 3D 30 20 63 65 6C 6C 70 61 64 64 69 cing=0 cellpaddi 

16:39:39) 6E 67 3D 30 3E 3C 74 72 3E 3C 74 64 20 76 61 6C ng=0><tr><td val 

16:39:39) 69 67 6E 3D 6D 69 64 64 6C 65 20 77 69 64 74 68 ign=middle width 

16:39:39) 3D 22 31 25 22 3E 3C 41 20 48 52 45 46 3D 22 2F = M 1% M ><A HREF =, V 

16:39:39) 75 70 64 2F 3F 68 74 74 70 3 A 2F 2F 6D 79 2E 79 upd/?http://my.y 

16:39:39) 61 68 6F 6F 2E 63 6F 6D 2F 22 3E 3C 69 6D 67 20 ahoo.com/"><img 

16:39:39) 73 72 63 3D 22 68 74 74 70 3 A 2F 2F 75 73 2E 69 src="http://us.i 

16:39:39) 31 2E 79 69 6D 67 2E 63 6F 6D 2F 75 73 2E 79 69 Lyimg.com/us.yi 
16:39:39) Dumped 0x3ClFD60 done 1024 

16:39:39) Web_Handler(391b3a4): Dumping parsed data=[3924688], size=925... 
16:39:39) Dumping 0x3924688 size 925 

16:39:39) 48 54 54 50 2F 3 1 2E 30 20 32 30 30 20 4F 4B OD HTTP/1 .0 200 OK. 

16:39:39) OA 44 61 74 65 3 A 20 4D 6F 6E 2C 20 30 35 20 46 .Date: Mon, 05 F 

16:39:39) 65 62 20 32 30 30 31 20 32 31 3A 33 38 3A 34 34 eb 2001 21:38:44 



II-3 



(16:39:39) 20 47 4D 54 0D OA 43 61 63 68 65 2D 43 6F 6E 74 
(16:39:39) 72 6F 6C 3A 20 70 72 69 76 61 74 65 OD OA 43 6F 
(16:39:39) 6E 6E 65 63 74 69 6F 6E 3A 20 63 6C 6F 73. 65 OD 
(16:39:39) OA 43 6F 6E 74 65 6E 74 2D 54 79 70 65 3A 20 74 
(16:39:39) 65 78 74 2F 68 74 6D 6C OD OA OD OA 3C68 74 6D 
(16:39:39) 6C 3E OA 3C 68 65 61 64 3E OA 3C 73 74 79 6C 65 
(16:39:39) 3E OA 3C 21 2D 2D OA 73 75 62 68 65 61 64 20 7B 
(16:39:39) 20 63 6F 6C 6F 72 3A 3B 20 20 66 6F 6E 74 2D 66 
(16:39:39) 61 63 65 3A 41 72 69 61 6C 3B 20 66 6F 6E 74 2D 
(16:39:39) 73 69 7A 65 3A 2D 31 3B 20 7D 2D 2D 3E OA 3C 2F 
(16:39:39) 73 74 79 6C 65 3E OA OA 3C 74 69 74 6C 65 3E 57 
(16:39:39) 65 6C 63 6F 6D 65 20 74 6F 20 4D 79 20 59 61 68 
(16:39:39) 6F 6F 21 3C 2F 74 69 74 6C 65 3E OA 3C 2F 68 65 
(16:39:39) 61 64 3E OA 3C 62 6F 64 79 20 20 62 67 63 6F 6C 
(16:39:39) 6F 72 3D 22 23 66 66 66 66 66 66 22 20 6F 6E 4C 
(16:39:39) 6F 61 64 3D 22 69 66 28 64 6F 63 75 6D 65 6E 74 
(16:39:39) 2E 66 6D 20 26 26 20 64 6F 63 75 6D 65 6E 74 2E 
(16:39:39) 66 6D 2E 6C 6F 67 69 6E 29 7B 64 6F 63 75 6D 65 
(16:39:39) 6E 74 2E 66 6D 2E 6C 6F 67 69 6E 2E 66 6F 63 75 
(16:39:39) 73 28 29 3B 7D 22 3E OA OA 3C 73 63 72 69 70 74 
(16:39:39) 20 6C 61 6E 67 75 61 67 65 3D 6A 61 76 61 73 63 
O (16:39:39) 72 69 70 74 3E OA 3C 21 2D 2D OA 76 61 72 20 72 
* 3 (16:39:39) 65 6D 6F 74 65 20 3D 20 6E 75 6C 6C 3B OA 66 75 
%ji (16:39:39) 6E 63 74 69 6F 6E 20 72 73 28 6E 2C 75 2C 77 2C 
%j (16:39:39) 68 29 20 7B OA 72 65 6D 6F 74 65 20 3D 20 77 69 
sjj (16:39:39) 6E 64 6F 77 2E 6F 70 65 6E 28 75 2C 20 6E 2C 20 
, 3 (16:39:39) 27 77 69 64 74 68 3D 27 20 2B 20 77 20 2B 20 27 
| S (16:39:39) 2C 68 65 69 67 68 74 3D 27 20 2B 20 68 20 2B 27 
: ^ (16:39:39) 2C 72 65 73 69 7A 61 62 6C 65 3D 79 65 73 2C 73 
~"~ r (16:39:39) 63 72 6F 6C 6C 62 61 72 73 3D 79 65 73 27 29 3B 
(16:39:39) OA 69 66 20 28 72 65 6D 6F 74 65 20 21 3D 20 6E 
If (16:39:39) 75 6C 6C 29 20 7B OA 69 66 20 28 72 65 6D 6F 74 
lZ (16:39:39) 65 2E 6F 70 65 6E 65 72 20 3D 3D 20 6E 75 6C 6C 
H (16:39:39) 29 OA 72 65 6D 6F 74 65 2E 6F 70 65 6E 65 72 20 
"if (16:39:39) 3D 20 73 65 6C 66 3B OA 77 69 6E 64 6F 77 2E 6E 
0(16:39:39) 61 6D 65 20 3D 20 27 6D 79 59 61 68 6F 6F 52 6F 
M (16:39:39) 6F 74 27 3B OA 72 65 6D 6F 74 65 2E 6C 6F 63 61 
(16:39:39) 74 69 6F 6E 2E 68 72 65 66 20 3D 20 75 3B OA 7D 
(16:39:39) OA 7D OA 2F 2F 2D 2D 3E OA 3C 2F 73 63 72 69 70 
(16:39:39) 74 3E OA 3C 63 65 6E 74 65 72 3E OA 3C 74 61 62 
(16:39:39) 6C 65 20 62 6F 72 64 65 72 3D 30 20 77 69 64 74 
(16:39:39) 68 3D 22 31 30 30 25 22 20 63 65 6C 6C 73 70 61 
(16:39:39) 63 69 6E 67 3D 30 20 63 65 6C 6C 70 61 64 64 69 
(16:39:39) 6E 67 3D 30 3E 3C 74 72 3E 3C 74 64 20 77 69 64 
(16:39:39) 74 68 3D 22 31 30 30 25 22 3E OA 3C 74 61 62 6C 
(16:39:39) 65 20 62 6F 72 64 65 72 3D 30 20 77 69 64 74 68 
(16:39:39) 3D 31 30 30 25 20 63 65 6C 6C 73 70 61 63 69 6E 
(16:39:39) 67 3D 30 20 63 65 6C 6C 70 61 64 64 69 6E 67 3D 
(16:39:39) 30 3E 3C 74 72 3E 3C 74 64 20 76 61 6C 69 67 6E 
(16:39:39) 3D 6D 69 64 64 6C 65 20 77 69 64 74 68 3D 22 31 
(16:39:39) 25 22 3E 3C 41 20 48 52 45 46 3D 22 2F 75 70 64 
(16:39:39) 2F 3F 68 74 74 70 3 A 2F 2F 6D 79 2E 79 61 68 6F 
(16:39:39) 6F 2E 63 6F 6D 2F 22 3E 3C 69 6D 67 20 73 72 63 
(16:39:39) 3D 22 68 74 74 70 3A 2F 2F 75 73 2E 69 31 2E 79 
(16:39:39) 69 6D 67 2E 63 6F 6D 2F 75 73 2E 79 69 



# 

GMT..Cache-Cont 
rol: private.. Co 
nnection: close. 
.Content-Type: t 
ext/html....<htm 
l>.<head>.<style 
>.<!--.subhead { 
color:; font-f 
ace:Arial; font- 
size:- 1; }-->.</ 
style>..<title>W 
elcome to My Yah 
oo!</title>.</he 
ad>.<body bgcol 
or="#ffffff onL 
oad="if(document 
.frn && document, 
fm . login) { docume 
nt.fm. login, focu 
s();}">..<script 
language=j avasc 
ript>.<!--.var r 
emote = null;.fu 
nction rs(n,u,w, 
h) { .remote = wi 
ndow.open(u, n, 
'width=' + w + ' 
^eight^' + h +' 
,resizable=yes,s 
c^o^ba^s=yes , ); 
.if (remote != n 
ull) {.if (remot 
e. opener == null 
).remote.opener 
= self;.window.n 
ame = 'my YahooRo 
ot';.remote.loca 
tion.href = u;.} 
.}.//-->.</scrip 
t>.<center>.<tab 
le border=0 widt 
h= M 100%" cellspa 
cing=0 cellpaddi 
ng=0><tr><td wid 
th="100°/o">.<tabl 
e border=0 width 
=100% cellspacin 
g=0 cellpadding= 
0><tr><td valign 
-middle width="l 
%"><A HREF=7upd 
/?http://my.yaho 
o.com/'Ximg src 
="http://us.il.y 
img.com/us.yi 



II-4 




# 



(16:39:39) Dumped 0x3924A25 done 925 

(16:39:47) Browser_Handler(392e398)::handle_input[429 1038473], r_bytes=709 
(16:39:47) Browser_Handler(392e398): Dumping raw incoming data... 
(16:39:47) Dumping 0x3ClF960 size 709 
(16:39:47) 47 45 54 20 68 74 74 70 3 A 2F 2F 6C 6F 67 69 6E 
(16:39:47) 2E 79 61 68 6F 6F 2E 63 6F 6D 2F 63 6F 6E 66 69 
(16:39:47) 67 2F 76 65 72 69 66 79 3F 2E 64 6F 6E 65 3D 68 
(16:39:47) 74 74 70 25 33 61 2F 2F 6D 79 2E 79 61 68 6F 6F 
(16:39:47) 2E 63 6F 6D 20 48 54 54 50 2F 31 2E 30 0D OA 41 
(16:39:47) 63 63 65 70 74 3A 20 69 6D 61 67 65 2F 67 69 66 
(16:39:47) 2C 20 69 6D 61 67 65 2F 78 2D 78 62 69 74 6D 61 
(16:39:47) 70 2C 20 69 6D 61 67 65 2F 6A 70 65 67 2C 20 69 
(16:39:47) 6D 61 67 65 2F 70 6A 70 65 67 2C 20 61 70 70 6C 
(16:39:47) 69 63 61 74 69 6F 6E 2F 76 6E 64 2E 6D 73 2D 70 
(16:39:47) 6F 77 65 72 70 6F 69 6E 74 2C 20 61 70 70 6C 69 
(16:39:47) 63 61 74 69 6F 6E 2F 76 6E 64 2E 6D 73 2D 65 78 
(16:39:47) 63 65 6C 2C 20 61 70 70 6C 69 63 61 74 69 6F 6E 
(16:39:47) 2F 6D 73 77 6F 72 64 2C 20 2A 2F 2A OD OA 41 63 
(16:39:47) 63 65 70 74 2D 4C 61 6E 67 75 61 67 65 3A 20 65 
(16:39:47) 6E 2D 75 73 OD OA 69 6B 65 6E 61 3 A 20 73 68 61 
3 (16:39:47) 72 65 64 OD OA 50 72 6F 78 79 2D 43 6F 6E 6E 65 
3(16:39:47) 63 74 69 6F 6E 3 A 20 4B 65 65 70 2D 41 6C 69 76 
J (16:39:47) 65 OD OA 55 73 65 72 2D 41 67 65 6E 74 3A 20 4D 
j(16:39:47) 6F 7A 69 6C 6C 61 2F 34 2E 30 20 28 63 6F 6D 70 
j(16:39:47) 61 74 69 62 6C 65 3B 20 4D 53 49 45 20 35 2E 35 
3(16:39:47) 3B 20 57 69 6E 64 6F 77 73 20 39 38 29 OD OA 48 
Ri(16:39:47) 6F 73 74 3A 20 6C 6F 67 69 6E 2E 79 61 68 6F 6F 
=^(16:39:47) 2E 63 6F 6D OD OA 50 72 61 67 6D 61 3A 20 6E 6F 
"(16:39:47) 2D 63 61 63 68 65 OD OA 43 6F 6F 6B 69 65 3A 20 
^(16:39:47) 42 3D 33 75 6A 38 76 3 1 70 6B 6E 34 6F 75 72 3B 
: :i:(16:39:47)20 49 3D69 31 3D 31 75 31 76 32 32 32 36 32 39 
~(16:39:47) 32 70 34 37 34 39 34 67 34 75 35 35 37 31 37 61 
^!(16:39:47) 37 64 61 30 61 63 61 64 62 30 62 33 62 64 62 70 
^(16:39:47) 63 30 63 3 1 63 67 63 6F 63 70 69 62 26 69 72 3D 
3(16:39:47) 37 38 3B 20 59 3D 76 3D 31 26 6E 3D 39 38 74 70 
"(16:39:47) 6E 74 30 37 75 30 6C 6F 30 26 6C 3D 32 37 34 64 
(16:39:47) 36 5F 70 37 30 64 36 2F 6F 26 70 3D 6D 32 64 30 
(16:39:47) 31 6F 39 34 31 30 30 62 30 34 26 72 3D 32 34 26 
(16:39:47) 6C 67 3D 75 73 26 69 6E 74 6C 3D 75 73 3B 20 54 
(16:39:47) 3D 7A 3D 54 68 77 66 36 41 54 6E 46 67 36 41 69 
(16:39:47) 4E 75 5A 68 32 2F 65 6F 63 45 4E 6A 63 33 42 6A 
(16:39:47) 59 7A 4E 7A 5A 50 4D 54 63 7A 4D 67 2D 2D 26 61 
(16:39:47) 3D 67 45 45 26 73 6B 3D 44 41 41 35 4F 36 30 4D 
(16:39:47) 47 4F 53 6F 46 78 26 64 3D 63 32 77 42 54 56 52 
(16:39:47) 42 64 30 46 55 52 54 42 4E 52 45 55 30 54 6D 70 
(16:39:47) 42 4D 45 35 52 4C 53 30 42 59 51 46 6E 52 55 55 
(16:39:47) 42 61 57 63 42 61 55 46 56 65 6B 46 42 41 58 70 
(16:39:47) 36 41 56 52 6F 64 32 59 32 51 57 64 58 51 51 2D 
(16:39:47) 2D OD OA OD OA 
(16:39:47) Dumped Ox3ClFC25 done 709 
(16:39:47) Browser_Handler(392e398): Dumping parsed data... 
(16:39:47) Dumping 0x393ECB4 size 686 
(16:39:47) 47 45 54 20 2F 63 6F 6E 66 69 67 2F 76 65 72 69 
(16:39:47) 66 79 3F 2E 64 6F 6E 65 3D 68 74 74 70 25 33 61 



GET http://login 
.yahoo.com/confi 
g/verify?.done=h 
ttp%3a//my .yahoo 
.com HTTP/1. 0..A 
ccept: image/gif 
, image/x-xbitma 
p, image/jpeg, i 
mage/pjpeg, appl 
ication/vnd.ms-p 
owerpoint, appli 
cation/vnd.ms-ex 
eel, application 
/msword, */*..Ac 
cept-Language: e 
n-us..ikena: sha 
red..Proxy-Conne 
ction: Keep-Aliv 
e.. User- Agent: M 
ozilla/4.0 (comp 
atible; MSIE 5.5 
; Windows 98).. H 
ost: login.yahoo 
.com. .Pragma: no 
-cache.. Cookie: 
B=3uj 8 v 1 pkn4our; 
I-il=lulv222629 
2p47494g4u55717a 
7da0acadb0b3bdbp 
cOc 1 cgcocpib&ir= 
78; Y=v=l&n=98tp 
nt07u01o0&l=274d 
6_p70d6/o&p=m2d0 
Io94100b04&r=24& 
lg=us&intl=us; T 
=z=Thwf6ATnFg6Ai 
NuZh2/eocENjc3Bj 
YzNzZPMTczMg-<&a 
=gEE&sk=DAA5O60M 
GOSoFx&d=c2wBTVR 
BdOFURTBNREUOTmp 
BME5RLS0BYQFnRUU 
BaWcBaUFVekFBAXp 
6AVRod2Y2QWdXQQ- 



GET /config/veri 
fy?.done=http%3a 



II-5 



# 



(16:39:47) 2F 2F 6D 79 2E 79 61 68 6F 6F 2E 63 6F 6D 20 48 
(16:39:47) 54 54 50 2F 3 1 2E 30 0D OA 43 6F 6F 6B 69 65 3A 
(16:39:47) 20 42 3D 62 35 6B 37 6F 71 38 74 37 75 37 62 34 
(16:39:47) 26 62 3D 32 3B 20 59 3D 76 3D 3 1 26 6E 3D 39 38 
(16:39:47) 74 70 6E 74 30 37 75 30 6C 6F 30 26 6C 3D 32 37 
(16:39:47) 34 64 36 5F 70 37 30 64 36 2F 6F 26 70 3D 6D 32 
(16:39:47) 64 30 31 6F 39 34 31 31 30 62 30 34 26 72 3D 32 
(16:39:47) 34 26 6C 67 3D 75 73 26 69 6E 74 6C 3D 75 73 3B 
(16:39:47) 20 54 3D 7A 3D 73 31 78 66 36 41 73 37 47 67 36 
(16:39:47) 41 30 30 75 45 45 51 79 67 49 7A 38 4E 6A 63 33 
(16:39:47) 42 6A 59 7A 4E 7A 5A 50 4D 54 63 7A 4D 67 2D 2D 
(16:39:47) 26 61 3D 67 45 45 26 73 6B 3D 44 41 41 77 6B 34 
(16:39:47) 70 68 50 78 50 4E 57 63 26 64 3D 63 32 77 42 54 
(16:39:47) 56 52 42 64 30 46 55 52 54 42 4E 52 45 55 30 54 
(16:39:47) 6D 70 42 4D 45 35 52 4C 53 30 42 59 51 46 6E 52 
(16:39:47) 55 55 42 61 57 63 42 61 55 46 56 65 6B 46 42 41 
(16:39:47)58 70 36 41 58 4D 78 65 47 59 32 51 57 64 58 51 
(16:39:47)51 2D 2D 3B 20 49 3D 69 31 3D 30 31 30 34 30 67 
(16:39:47) 3 1 75 3 1 76 32 34 32 36 32 39 32 70 33 68 34 39 
(16:39:47) 34 67 34 75 37 31 37 32 37 61 37 64 37 66 37 69 
(16:39:47) 37 6F 38 34 39 6A 61 30 61 6E 62 33 62 64 62 68 
} (16:39:47) 62 70 63 30 63 31 63 62 63 70 63 73 63 75 65 6D 
I (16:39:47) 26 69 72 3D 37 63 OD OA 41 63 63 65 70 74 3 A 20 
jj (16:39:47) 69 6D 61 67 65 2F 67 69 66 2C 20 69 6D 61 67 65 
J (16:39:47) 2F 78 2D 78 62 69 74 6D 61 70 2C 20 69 6D 61 67 
J (16:39:47) 65 2F 6A 70 65 67 2C 20 69 6D 61 67 65 2F 70 6A 
1(16:39:47) 70 65 67 2C 20 61 70 70 6C 69 63 61 74 69 6F 6E 
Sj (16:39:47) 2F 76 6E 64 2E 6D 73 2D 70 6F 77 65 72 70 6F 69 
4(16:39:47) 6E 74 2C 20 61 70 70 6C 69 63 61 74 69 6F 6E 2F 
" (16:39:47) 76 6E 64 2E 6D 73 2D 65 78 63 65 6C 2C 20 61 70 
=-(16:39:47) 70 6C 69 63 61 74 69 6F 6E 2F 6D 73 77 6F 72 64 
fHl 6:39:47) 2C 20 2A 2F 2A OD OA 41 63 63 65 70 74 2D 4C 61 
:: (16:39:47) 6E 67 75 61 67 65 3A 20 65 6E 2D 75 73 OD OA 43 
i(l 6:39:47) 6F 6E 6E 65 63 74 69 6F 6E 3 A 20 4B 65 65 70 2D 
;f (16:39:47) 41 6C 69 76 65 OD OA 55 73 65 72 2D 41 67 65 6E 
^(16:39:47) 74 3A 20 4D 6F 7A 69 6C 6C 61 2F 34 2E 30 20 28 
"(16:39:47) 63 6F 6D 70 61 74 69 62 6C 65 3B 20 4D 53 49 45 
(16:39:47) 20 35 2E 35 3B 20 57 69 6E 64 6F 77 73 20 39 38 
(16:39:47) 29 OD OA 48 6F 73 74 3A 20 6C 6F 67 69 6E 2E 79 
(16:39:47) 61 68 6F 6F 2E 63 6F 6D OD OA 50 72 61 67 6D 61 
(16:39:47) 3A 20 6E 6F 2D 63 61 63 68 65 OD OA OD OA 
(16:39:47) Dumped Ox393EF62 done 686 



//my .yahoo. com H 
TTP/1.0..Cookie: 
B=b5k7oq8t7u7b4 
&b=2; Y=v=l&n=98 
tpnt07u01o0&l=27 
4d6_p70d6/o&p=m2 
d01o94110b04&r=2 
4&lg=us&intl=us; 
T=z=slxf6As7Gg6 
A00uEEQygIz8Njc3 
BjYzNzZPMTczMg— 
&a=gEE& sk=D A A wk4 
phPxPNWc&d=c2wBT 
VRBdOFURTBNREUOT 
mpBME5RLS0BYQFnR 
UUBaWcBaUFVekFBA 
Xp6AXMxeGY2QWdXQ 
Q~; I=il=01040g 
Iulv2426292p3h49 
4g4u71727a7d7f7i 
7o849ja0anb3bdbh 
bpcOc 1 cbcpcscuem 
&ir=7c. Accept: 
image/gif, image 
/x-xbitmap, imag 
e/jpeg, image/pj 
peg, application 
/vnd.ms-powerpoi 
nt, application/ 
vnd.ms-excel, ap 
pi ication/msword 
, */*..Accept-La 
nguage: en-us..C 
onnection: Keep- 
Alive.. User- Agen 
t: Mozilla/4.0 ( 
compatible; MSIE 
5.5; Windows 98 
)..Host: login.y 
ahoo.com. .Pragma 
: no-cache.... 



w/o cookie management, no flag "ikena: shared" 

(16:39:25) Browser_Handler(39082d8)::handle_input[429 1038473], r_bytes=310 
(16:39:25) Browser_Handler(39082d8): Dumping raw incoming data... 
(16:39:25) Dumping 0x3ClF960 size 310 

(16:39:25) 47 45 54 20 68 74 74 70 3 A 2F 2F 77 77 77 2E 69 GET http://www.i 

(16:39:25) 6B 65 6E 61 2E 63 6F 6D 2F 67 72 6F 75 70 2F 62 kena.com/group/b 

(16:39:25) 65 67 69 6E 2E 63 66 6D 20 48 54 54 50 2F 31 2E egin.cfm HTTP/1. 

(16:39:25) 30 OD OA 41 63 63 65 70 74 3A 20 2A 2F 2A OD OA O..Accept: */*.. 

(16:39:25) 41 63 63 65 70 74 2D 4C 61 6E 67 75 61 67 65 3A Accept-Language: 



II-6 



(16:39:25) 20 65 6E 2D 75 73 0D OA 43 6F 6F 6B 69 65 3A 20 
(16:39:25) 43 46 49 44 3D 32 38 3B 20 43 46 54 4F 4B 45 4E 
(16:39:25) 3D 36 30 33 35 35 33 31 30 3B 20 52 45 46 43 49 
(16:39:25) 44 3D 3B 20 52 45 46 45 52 53 49 54 45 49,44 3D 
(16:39:25) 31 3B 20 52 45 46 53 43 4F 52 45 3D 30 3B 20 53 
(16:39:25) 55 42 5F 53 45 43 54 49 4F 4E 53 3D 3B 20 3B 20 
(16:39:25) 53 55 42 5F 53 45 43 54 49 4F 4E 53 5F 4C 49 4E 
(16:39:25) 4B 53 3D OD OA 55 73 65 72 2D 41 67 65 6E 74 3A 
(16:39:25) 20 4D 6F 7A 69 6C 6C 61 2F 34 2E 30 20 28 63 6F 
(16:39:25) 6D 70 61 74 69 62 6C 65 3B 20 4D 53 49 45 20 35 
(16:39:25) 2E 35 3B 20 57 69 6E 64 6F 77 73 20 39 38 29 OD 
(16:39:25) OA 48 6F 73 74 3A 20 77 77 77 2E 69 6B 65 6E 61 
(16:39:25) 2E 63 6F 6D OD OA 50 72 6F 78 79 2D 43 6F 6E 6E 
(16:39:25) 65 63 74 69 6F 6E 3 A 20 4B 65 65 70 2D 41 6C 69 
(16:39:25) 76 65 OD OA OD OA 
(16:39:25) Dumped 0x3ClFA96 done 310 
(16:39:25) Browser_Handler(39082d8): Dumping parsed data... 
(16:39:25) Dumping 0x3918BF4 size 282 
(16:39:25) 47 45 54 20 2F 67 72 6F 75 70 2F 62 65 67 69 6E 
(16:39:25) 2E 63 66 6D 20 48 54 54 50 2F 31 2E 30 OD OA 43 
(16:39:25) 6F 6F 6B 69 65 3A 20 43 46 49 44 3D 32 38 3B 20 
s (16:39:25) 43 46 54 4F 4B 45 4E 3D 36 30 33 35 35 33 31 30 
1 (16:39:25) 3B 20 52 45 46 43 49 44 3D 3B 20 52 45 46 45 52 
1 (16:39:25) 53 49 54 45 49 44 3D 3 1 3B 20 52 45 46 53 43 4F 
j (16:39:25) 52 45 3D 30 3B 20 53 55 42 5F 53 45 43 54 49 4F 
I (16:39:25) 4E 53 3D 3B 20 53 55 42 5F 53 45 43 54 49 4F 4E 
§ (16:39:25) 53 5F 4C 49 4E 4B 53 3D OD OA 41 63 63 65 70 74 
^(16:39:25) 3 A 20 2A 2F 2A OD OA 41 63 63 65 70 74 2D 4C 61 
I (16:39:25) 6E 67 75 61 67 65 3 A 20 65 6E 2D 75 73 OD OA 55 
"(16:39:25) 73 65 72 2D 41 67 65 6E 74 3A 20 4D 6F 7A 69 6C 
.(16:39:25) 6C 61 2F 34 2E 30 20 28 63 6F 6D 70 61 74 69 62 
i (16:39:25) 6C 65 3B 20 4D 53 49 45 20 35 2E 35 3B 20 57 69 
f (16:39:25) 6E 64 6F 77 73 20 39 38 29 OD OA 48 6F 73 74 3A 
t (16:39:25) 20 77 77 77 2E 69 6B 65 6E 61 2E 63 6F 6D OD OA 
^(16:39:25) 43 6F 6E 6E 65 63 74 69 6F 6E 3A 20 4B 65 65 70 
3(16:39:25) 2D 41 6C 69 76 65 OD OA OD OA 
'"(16:39:25) Dumped 0x3918D0E done 282 



• 

en-us..Cookie: 
CFID=28; CFTOKEN 
=60355310; REFCI 
D=; REFERSITEID= 
1;REFSCORE=0;S 
UB_SECTIONS=; ; 
SUB_SECTIONS_LIN 
KS=. User- Agent: 
Mozilla/4.0 (co 
mpatible; MSIE 5 
.5; Windows 98). 
.Host: www.ikena 
. com. .Proxy-Conn 
ection: Keep-Ali 
ve.... 



GET /group/begin 
xfm HTTP/1. 0..C 
ookie: CFID=28; 
CFTOKEN=60355310 
; REFCID=; REFER 
SITEID=l;REFSCO 
RE=0; SUB_SECTIO 
NS=; SUB_SECTION 
S_LINKS= .Accept 
: */*..Accept-La 
nguage: en-us„U 
ser-Agent: Mozil 
la/4.0 (compatib 
le; MSIE 5.5; Wi 
ndows 98).. Host: 
www . ikena.com . . 
Connection: Keep 
-Alive.... 
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